[Freeipa-devel] [PATCH] ticket forwarding and TurboGears

Rob Crittenden rcritten at redhat.com
Fri Sep 14 21:34:00 UTC 2007


Nalin Dahyabhai wrote:
> On Thu, Sep 13, 2007 at 02:24:17PM -0400, Rob Crittenden wrote:
>> With TurboGears I'm using mod_proxy to forward the requests after 
>> authentication. What I do is grab a copy of the environment variables 
>> REMOTE_USER and KRB5CCNAME and include those as request headers to 
>> TurboGears. TG then can identify the principle and the location of that 
>> users keytab.
> 
> I can't comment on the rest (not enough familiarity with it), but what
> you're calling a keytab here is actually a credential cache -- a keytab
> file is something rather different, and the use of the terms here
> confused the heck out of me.
> 
> Cheers,
> 
> Nalin

Ok, here is a replacement patch for freeipa-179-ticket.patch that uses a 
better variable name.

rob
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: freeipa-179-ticket.patch2
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070914/0197f5a3/attachment.ksh>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070914/0197f5a3/attachment.bin>


More information about the Freeipa-devel mailing list